SC-300 Practice Question 3497
Exam: SC-300
Domain: Plan and automate identity governance
Difficulty: medium
How can you require that a user must complete an MFA challenge each time they activate an eligible role in PIM?
Answer Options
A
Enable ""On activation, require Microsoft Entra Multifactor Authentication""
B
Disable MFA tenant-wide in Security Defaults
C
Require users to submit written paper approval forms to HR
D
Force users to reboot their laptop before activating roles
Correct Answer
A: Enable ""On activation, require Microsoft Entra Multifactor Authentication""
Explanation
In PIM role settings, enable ""On activation, require Microsoft Entra Multifactor Authentication"" to force users to complete MFA during activation.